Debian Patches

Status for mongo-c-driver/1.23.1-1+deb12u2

Patch Description Author Forwarded Bugs Origin Last update
CVE-2024-6381.patch [PATCH] CDRIVER-5504 Use pointer-based iteration when traversing array elements (#1552) Ezra Chung <88335979+eramongodb@users.noreply.github.com> no https://github.com/mongodb/mongo-c-driver/commit/effd95c34ad421df94eec7c69236f0e4172552d0 2024-03-08
CVE-2024-6383.patch [PATCH] CDRIVER-5552 more robust string handling (#1593) =?UTF-8?q?Roberto=20C=2E=20S=C3=A1nchez?= <roberto@connexer.com> no https://github.com/mongodb/mongo-c-driver/commit/7c34461863211be172e6317221d72e4429bed45e 2024-05-03
CVE-2025-0755.patch [PATCH] CDRIVER-5601 more robust bson append (#1648) =?UTF-8?q?Roberto=20C=2E=20S=C3=A1nchez?= <roberto@connexer.com> no https://github.com/mongodb/mongo-c-driver/commit/d3cdb626be30748b9360451023c75438ec346a38 2024-07-16
CVE-2023-0437.patch [PATCH] CDRIVER-4747 use `size_t` consistently in `bson_utf8_validate` (#1458) Kevin Albertson <kevin.albertson@mongodb.com> no https://github.com/mongodb/mongo-c-driver/commit/fd3a978b35cac8f3c78c4d9a1b08fd5aa4d440b8 2023-10-30
CVE-2025-12119.patch [PATCH] CDRIVER-6112 fix ownership transfer of `mongoc_write_command_t` (#2132) (#2137)

* add regression test
* do not memcpy `bson_t` struct in array
* `memcpy` does not correctly transfer ownership of `bson_t`. Instead: heap allocate `bson_t`.
* warn against using `bson_t` in `mongoc_array_t`
Kevin Albertson <kevin.albertson@mongodb.com> no 2025-10-06

All known versions for source package 'mongo-c-driver'

Links